WCS guest account issue

Hello,
I having problems with the expiration date of the guest account, sometimes the account expired in the same day of the start date and also sometimes sends a wrong message of expiration date before the end date.
This is the configuration for one guest account.
And I received a message of expiration date
User Active from : Mon Feb 11 09:00:37 CST 2013 User Active until : Mon Feb 11 12:00:37 CST 2013
The current version of the IOS is 7.0.230.0
What could be the problem?
Regards,

That is only for when when you want them to be able to access the wireless. So if you set the login for 20 days, you can leave off the weekends and they won't be allowed to login.
Sent from Cisco Technical Support iPhone App

Similar Messages

Create WCS guest accounts

Hi
I like to know if some one has some solution or input to my questions below
Is there a way to auto generate user and password for guest accounts?
So that you don't have to write in username just click on generate accont and WCS make up a username and password.
And when bulk loading guest user is it posible to configure start date and time not just lifetime of the account like when you manual create a guest account?
Regards
Mikael Mattsson

Hi,
no you cannot auto-generate the username. The Lobby Ambassador has to type in the username.
For bulk imports, you cannot schedule a future start time I'm afraid.
This kind of advanced guest feature is more what the NAC Guest Server can do (it's not only for NAC, it's a Guest Server).
Hope this helps,
Nicolas
===
Don't forget to rate answers that you find useful

Can't remove wcs guest account if account has expired on wlc

Hi. I am running wcs 4.1.91.0. I'm using Lobby Ambassoador functionality. I've found that if you create a guest acount using wcs with a limited lifetime, then after that lifetime period, you cannot delete the guest account from wcs as the account has already expired on the wlc. You get no error message in wcs -it just shows a JavaVoid error message at the bottom of the browser. I'm assuming wcs is trying to delete the account from the wlc but cant because the account is no longer on the wlc. Has this been resolved in a later version of wcs yet??

Here is the URL Cisco Guest Access Using the Cisco Wireless LAN Controller follow the configuration guide it will help you manage the guest account in WLC :
http://www.cisco.com/en/US/docs/wireless/technology/guest_access/technical/reference/4.1/GAccess_41.html#wp1001402

Guest account issues

After having fully restored my Mac HD, I played a bit with the Guest Account (following this http://www.macosxhints.com/article.php?story=20080205095429448 guide). In my previous installation I had my Guest Account configured using the above guide, but didn't back it up so had to start again the tweak. However this time I did something *ridiculously smart*: after all settings were changed through Server Admin Tools, I changed the Guest Account name to something else, which screwed it up completely. For i.e., when I try to log in it Leopard pops up an error message since it can't find the "guest folder where it's usually stored". Also, I can't log out.
My aim now is to restore the Guest Account back to how it was by default, since just disable and re-enable the account as is wouldn't do the job.
Any suggestion?

V.K. wrote:
ridiculously smart indeed.
V.K. wrote:
run the following terminal command
sudo ls /var/db/dslocal/nodes/Default/users/
post back with the results and we'll proceed from there.
$ sudo ls /var/db/dslocal/nodes/Default/users/
WARNING: Improper use of the sudo command could lead to data loss
or the deletion of important system files. Please double-check your
typing when using sudo. Type "man sudo" for more information.
To proceed, enter your password, or type Ctrl-C to abort.
Password:
Account1.plist _jabber.plist _svn.plist
Account2.plist _lp.plist _teamsserver.plist
*Guest.plist * _mailman.plist _tokend.plist
_amavisd.plist _mcxalr.plist _unknown.plist
_appowner.plist _mdnsresponder.plist updatesharing.plist
_appserver.plist _mysql.plist _uucp.plist
_ard.plist _pcastagent.plist _windowserver.plist
_atsserver.plist _pcastserver.plist _www.plist
_calendar.plist _postfix.plist _xgridagent.plist
_clamav.plist _qtss.plist _xgridcontroller.plist
_cvs.plist _sandbox.plist daemon.plist
_cyrus.plist _securityagent.plist frontrow.plist
_devdocs.plist _serialnumberd.plist nobody.plist
_eppc.plist _spotlight.plist root.plist
_installer.plist _sshd.plist
Thanks very much for your help!

Scheduling WCS Guest User Accounts

Hi all,
I am question concerning scheduling WCS guest user accounts. I would appreciate having opportunity to schedule WCS guest account as a lobby ambassador. I know it is possible to do that but only in case that you allow (as administrator) for the user "lobby ambassador" set up "lifetime" to unlimited. If you set up a limited lifetime in "Defaults for creating Guest User accounts", the lobby ambassador is not able to schedule WCS guest account because this options is missing.
Is it possible to do that without this restriction?
The second issue is the email which consists of the guest user account credentials. Each time the scheduled time comes up, the guest user account credentials are emailed to the specified email address.
Is it possible to send the credentials right after creating the guest user account and not when the scheduled time comes up which can be a week later?
Jozef

No this should not be done because, the credentials are pushed by WCS to the controller only when the time comes.
Once the WLC confirms the user is created, then WCS goes ahead and send you the credentials.
Technically this could be added to WCS, it would be a PERs : Personnal Enhancement Request to be filed from your System Engineer, Account / Sales team

WCS expiring guest accounts early

Hi Folks, We've had a number of reports from our Service Desk (who create the guest accounts for us) that they've been getting users who have long-term accounts (90days) expire early.
I've taken a look at the settings and sure enough, today there are accounts on WCS that are showing as expired but have a long life time.
Example:
User(x) created on 13th July with an expiry of the 15th Sept
User(y) created on 12th July with an expiry of the 12th Oct
This is only a couple listed here but the problem seems to be widespread accross long-life accounts. I've checked the clocks and they're all synced between WCS and the WLC's, when accounts are created they are done through WCS and pushed down to the single mobility anchor (our topology is 6 WLC's split over 2 sites, with a 7th WLC for MA with a toe in the internet DMZ)
We're running 7.0.172.0 of WCS and 7.0.116.0 on all the WLC's I think the problem has started to occur as it's really only now that we're using longer life-time accounts in anger.
Originally the accounts were being deleted by the cleaner process, so it just looked like the accounts were disappearing - we've stopped this and now it just shows that they expire.
Any suggestions that you can give as to why this might be occuring would be great! Unfortunaly we can't create 'unlimited' accounts as our policy is that they should have a lifetime of no more than 3 months, so the overhead on monitoring would be too big - so there has to be an automated process.
Thanks in advance!
Kev

I upgraded to WLC 7.0.235.0 and WCS 7.0.230.0 and am still getting users complaining about their accounts expiring early. Someone please correct me if I have misread something but the WCS is suppose to check the account every so often and re-provision the account based on the expire date set? We setup our users with 90day accounts that is pushed to two 5508 controllers running the code above, the process works well but the expiration of accounts has become a issue. Anyone know if the bug was truly fixed in 7.0.235 code or do I need to set the lifetime of the account lower.

Local Authentication for Guest accounts created on WCS

I'm not sure this is technically possible but I have a requirement to set up an SSID on a WLC whereby I can provision guest user accounts from the WCS and have the WLC / SSID authenticate against the guest account created on the WCS. The SSID would not be a web-auth / layer 3 auth model but preferably be able to utilise layer 2 authentication (802.1x) against the account within WCS. Can anyone tell me if this is actually possible?
Thanks in advance for your help.
Cheers
Sent from Cisco Technical Support iPad App

Ok then .. Sounds like you are already very fimilar with the wlc..
Lets kick a few ideas around ..
If you want to use WCS lobby then you cant use radius, becuase WCS will not update radius accounts. But you could use the WLC as a radius server and store the guest account(s) on the WLC. Gives you 802.1X security, WCS loddy admin access and your guest accounts. You can also expire the accounts as well. So you would move the control from radius to the wlc. You can also apply your qos / bandwidth.
Another option would be to create radius accounts. Set up your guest wlan, point it to radius. You can still apply a global bandwith restriction within the qos profile on the wlc.
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

GUEST Account Time Triggering after first login In WCS

Hi,
I just need to know that is WCS capable of creating guest account in a way that the starting time line can be triggered after first login
Thanks

Hi,
I just need to know that is WCS capable of creating guest account in a way that the starting time line can be triggered after first login
Thanks

Lobby Ambassador - WCS Logging of Guest Account Creation

Hello all,
If I am user "admin-ken" and I setup an guest user account "guestuser1" via the WCS controller templates > Guest User (which takes me into lobby ambassador), is there a log file that indicates that "admin-ken" had setup "guestuser1" guest account?
Many thx indeed,
Kind regards,
Ken

HiKen,
Hope all is well :)
Maybe this is what you are looking for;
Logging the Lobby Ambassador Activities
The following activities are logged for each lobby ambassador account:
â¢Lobby ambassador login: WCS logs the authentication operation results for all users.
â¢Guest user creation: When a lobby ambassador creates a guest user account, WCS logs the guest user name.
â¢Guest user deletion: When a lobby ambassador deletes the guest user account, WCS logs the deleted guest user name.
â¢Account updates: WCS logs the details of any updates made to the guest user account. For example, increasing the life time.
Follow these steps to view the lobby ambassador activities.
Note You must have superuser status to open this window.
Step 1 Log into the Navigator or WCS user interface as an administrator.
Step 2 Click Administration > AAA, then click Groups in the left sidebar menu to display the All Groups window.
Step 3 On the All Groups windows, click the Audit Trail icon for the lobby ambassador account you want to view. The Audit Trail window for the lobby ambassador displays.
This window enables you to view a list of lobby ambassador activities over time.
â¢User: User login name
â¢Operation: Type of operation audited
â¢Time: Time operation was audited
â¢Status: Success or failure
Step 4 To clear the audit trail, choose Clear Audit Trail from the Select a command drop-down menu and click GO.
http://www.cisco.com/en/US/docs/wireless/wcs/4.2/configuration/guide/wcsmanag.html#wp1076868
http://www.cisco.com/en/US/docs/wireless/technology/guest_access/technical/reference/4.1/GAccess_41.html#wp1001609
Hope this helps!
Rob

WCS logs for Guest accounts

Hello,
Are there any logs on the WCS that can capture the MAC and IP address of a Guest client ?
The idea is to have this information available in order to correlate it with the Web server logs. It seems that the WCS logs capture only the MAC address
of a Guest client.
Are you aware of any settings for any logs that would enable logging of both the IP and MAC address for guest accounts ?
Thank you in advance
Best Regards,Pan

In 5.2 take a look at the guest user session report:
http://www.cisco.com/en/US/docs/wireless/wcs/5.2/configuration/guide/5_2reps.html#wp1117029
Guest User Sessions Report
The Guest User Sessions report shows historical session data for a guest user such as amount of data passed, login and logout time, the guest IP address, and the guest MAC address.
The session data is available (by default) for one month after the session event occurs. This data retention period is configurable from the WCS background task settings page.
This report can be generated for guest users who are associated to controllers running software version 5.2 and above.

WCS and Guest account / limited usage web authentication

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin-top:0in;
mso-para-margin-right:0in;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0in;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
Here my problem I need to be able to limit my AD users to a 10min access to the WLAN. I see you can do this for guest accounts, but you have to manually enter a username and password. I would like the web authentication to use our ACS which is tied in to our AD. Is there a way to do this?

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin-top:0in;
mso-para-margin-right:0in;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0in;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
Weterry,
Here the whole story. I have a bookstore that going to have “Demo” pc for students to buy. The want to show the internet on these devices, but our security guy require all users to logon. I was hoping to find a way to let user logon quickly to test these devices.
I have already figure out the web auth and that great feature, but you have to manually enter each user. If I could get that to use AD and limit each to 10min that would be great. I would like to setup a SSID for the demo devices and limit users to 10 min.
I have 2 WiSM controllers running 6.0 also have WCS .
Thanks
Chappy

Guest account on WCS doesn't work as expected

Hi,
I have scheduled a guest account on WCS (6.0), valid 180 days, generate password every day and email to myself, and applied to our WLCs( 5.1). The first day, guest account was created on all WLCs, and emailed me the password, worked fine, the second day, I received email with the new password, but the guest account has disappered from all WLCs, on WCS, this guest account still show as 'Active' but not apply to any WLC.
Thanks in advance for your help!

Our WLC version is 5.1.151.0 and WCS version was 6.0.132.0 but I just upgraded it to 6.0.170.0. Guest Account Sync option is enabled now ( once a day). I think I find something, one is the time on WCS and WLCs was different before (corrected this now), second, the guest account start time and end time was set to same time (1:00 Jan 1, 2010- 1:00 Jul 1, 2010) or from 8:30 Jan 1, 2010 to 8:00 Jul 1, 2010. I thought this time setting is the lifetime of the account, but actually it's the active time of the account on every scheduled day, so I change this to from 1:00 Jan 1, 2010 to 23:00 Jul 1, 2010, So far,it works fine - this guest account is created at 1:00 and removed at 23:00 everyday.
By the way, is there any documentation to tell how WCS works with WlC underneath the GUI?
Thanks for your help!

Guest Account Setup - ISSUES!

Hello,
I recently bought a new iMac 20' with leopard pre-installed. I want to set up a guest account for my roommates and guests to use the computer. Each time i try to set up the guest account from system preferences I get the spinning ball (i call it the beach ball of death). Force quitting system preferences causes programs not to load afterwards. When I shut down or reboot, a blue screen just flickers endlessly.
I have tried repairing permissions through disk utility. I have also tried the most recent combo update. Any other ideas? i would love to have a guest account instead of people using my account on my brand spanking new iMac, which i love already.
Thanks in advance,
Curt

Problem Solved!
I just followed the very good description at this thread:
http://discussions.apple.com/thread.jspa?messageID=8130823&#8130823
which solved my problem. Guest account up and running again!
It happened to me also, on my imac and my MacBook Air.
It seems that user account migration somehow confuses the "guest user" machinery, which totally trashes securityd which dies of sudden death and from then on nothing works on the computer.
The solution is to do the following in System Preferences:
0. Your system guest account must be disabled (it already is if you have the described symptoms).
1. Create new standard account with name "guest" and short name "guest".
IMPORTANT: short name must be "guest" - OS will suggest "guest1", but you must edit that into "guest".
2. Enable system guest account in System Preferences (check the "Allow guests to log into this computer" switch). It will work now that "guest" name is taken.
This action will create user account with short name "guest1" with all the properties of guest (clean-up after logout etc.).
3. Completely delete standard user "guest", which you created in step 1 (check "delete all data and folder now").
4. Disable system guest account (uncheck the switch).
5. Right-click on system guest account icon and choose "Advanced" or whatever (there is only one menu item anyway) and change short name from "guest1" to "guest".
6. Enable system guest account.
Voila. You now have working guest account (well, I have it, and hopefully you will, too)...
P.S. I am not sure whether you need to log-in/out/restart between steps. I remember I did some of that dance, but probably it is not necessary...

Cannot Login with Guest Account

I cannot login to OS X using the guest account I have enabled. When I try to login with the guest account, the window shakes no. How do I fix this?

see this thread, will probably solve your issue
http://discussions.info.apple.com/thread.jspa?threadID=1521487

My MacBook Pro (mid 2010) won't startup correctly in my admin account, but works fine if I use the guest account...

My MacBook Pro (mid-2010) suddenly stopped working when I was overseas, but I managed to fix it when I returned back to the States after I reformatted and erased the disk, then installed Yosemite. I lost most of my files but didn't really care, though I noticed that some pictures from iPhoto had survived and were in the Trash folder.
I thought I could copy/paste them back into iPhoto, but it wouldn't let me since they were still in the trash. I started getting an error message for EACH PICTURE saying it couldn't be copied because it was in the trash, and when I realized that I'd have to click "ok" 644 times (once for each picture), I tried to restart, then shut down, and eventually forced a shut down by holding down the power button. This is where the problem started...
After trying to startup again, I was able to login to my admin account, and the desktop image would load, but I'd get the spinning rainbow wheel and the computer would remain frozen like that from then on. I tried to repair the disk (there was nothing wrong), and even re-installed the operating system again, but still the problem persists. BUT, if I login with my guest account, everything works fine.
I'm guessing it has something to do with it somehow being frozen on those error messages for those 600+ pictures, but I have no idea how to fix/unfreeze it. Any tips or suggestions?

mozak wrote:
Can the use of SATA3 instead of SATA2 hdd lead to some issues with my macbook?
I can try to find and buy new SATA2 sdd hdd but they are expensive and I'm not sure it will fix the restarting issue.
SATA3 is backwards compatible with SATA2. That is not likely to be your problem.
Based on what you have done, I suggest a reinstall of the OSX.
Ciao.

WCS guest account issue

Similar Messages

Maybe you are looking for